CVE-2015-1165 RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to obtain sensitive RSS feed URLs and ticket data via unspecified vectors.
MediumCVSS 5.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to obtain sensitive RSS feed URLs and ticket data via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/request-tracker4(Debian:12) | < 4.2.8-3 | 4.2.8-3 |
| debian linux | = 7.0 | No fix listed |
| fedoraproject fedora | = 21 | No fix listed |
| fedoraproject fedora | = 22 | No fix listed |
| bestpractical request tracker | = 3.8.8 | No fix listed |
| bestpractical request tracker | = 3.8.9 | No fix listed |
| bestpractical request tracker | = 3.8.10 | No fix listed |
| bestpractical request tracker | = 3.8.11 | No fix listed |
| bestpractical request tracker | = 3.8.12 | No fix listed |
| bestpractical request tracker | = 3.8.13 | No fix listed |
| bestpractical request tracker | = 3.8.14 | No fix listed |
| bestpractical request tracker | = 3.8.15 | No fix listed |
| bestpractical request tracker | = 3.8.16 | No fix listed |
| bestpractical request tracker | = 3.8.17 | No fix listed |
| bestpractical request tracker | = 4.0.0 | No fix listed |
| bestpractical request tracker | = 4.0.1 | No fix listed |
| bestpractical request tracker | = 4.0.2 | No fix listed |
| bestpractical request tracker | = 4.0.3 | No fix listed |
| bestpractical request tracker | = 4.0.4 | No fix listed |
| bestpractical request tracker | = 4.0.5 | No fix listed |
| bestpractical request tracker | = 4.0.6 | No fix listed |
| bestpractical request tracker | = 4.0.7 | No fix listed |
| bestpractical request tracker | = 4.0.8 | No fix listed |
| bestpractical request tracker | = 4.0.9 | No fix listed |
| bestpractical request tracker | = 4.0.10 | No fix listed |
Show 22 more
| Product | Affected versions | Fixed in |
|---|---|---|
| bestpractical request tracker | = 4.0.11 | No fix listed |
| bestpractical request tracker | = 4.0.12 | No fix listed |
| bestpractical request tracker | = 4.0.13 | No fix listed |
| bestpractical request tracker | = 4.0.14 | No fix listed |
| bestpractical request tracker | = 4.0.15 | No fix listed |
| bestpractical request tracker | = 4.0.16 | No fix listed |
| bestpractical request tracker | = 4.0.17 | No fix listed |
| bestpractical request tracker | = 4.0.18 | No fix listed |
| bestpractical request tracker | = 4.0.19 | No fix listed |
| bestpractical request tracker | = 4.0.20 | No fix listed |
| bestpractical request tracker | = 4.0.21 | No fix listed |
| bestpractical request tracker | = 4.0.22 | No fix listed |
| bestpractical request tracker | = 4.2.0 | No fix listed |
| bestpractical request tracker | = 4.2.1 | No fix listed |
| bestpractical request tracker | = 4.2.2 | No fix listed |
| bestpractical request tracker | = 4.2.3 | No fix listed |
| bestpractical request tracker | = 4.2.4 | No fix listed |
| bestpractical request tracker | = 4.2.5 | No fix listed |
| bestpractical request tracker | = 4.2.6 | No fix listed |
| bestpractical request tracker | = 4.2.7 | No fix listed |
| bestpractical request tracker | = 4.2.8 | No fix listed |
| bestpractical request tracker | = 4.2.9 | No fix listed |
References
- Debian Security Tracker CVE-2015-1165 vendor-advisory
- blog.bestpractical.com vendor-advisory
- FEDORA-2015-4666 vendor-advisory
- FEDORA-2015-4698 vendor-advisory
- DSA-3176 vendor-advisory